{"total":135,"rows":[{"id":"2209.00626","title":"The Alignment Problem from a Deep Learning Perspective","created":"2022-08-30","cited_by_count":258,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"1807.09936","title":"Multi-Agent Generative Adversarial Imitation Learning","created":"2018-07-26","cited_by_count":100,"area":"offlinerl"},{"id":"2305.08192","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","created":"2023-05-14","cited_by_count":94,"area":"diffusion"},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2208.08831","title":"Discovering Bugs in Vision Models using Off-the-shelf Image Generation and Captioning","created":"2022-08-18","cited_by_count":45,"area":null},{"id":"2205.09435","title":"Adversarial random forests for density estimation and generative modeling","created":"2022-05-19","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2210.00933","title":"Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loop","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2206.05075","title":"Diffeomorphic Counterfactuals with Generative Models","created":"2022-06-10","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2208.11613","title":"Unrestricted Black-box Adversarial Attack Using GAN with Limited Queries","created":"2022-08-24","cited_by_count":18,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2111.00684","title":"Graph Structural Attack by Perturbing Spectral Distance","created":"2021-11-01","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2301.06083","title":"Discrete Point-wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition","created":"2022-12-19","cited_by_count":14,"area":null},{"id":"2306.03048","title":"From Robustness to Explainability and Back Again","created":"2023-06-05","cited_by_count":14,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2309.07398","title":"Semantic Adversarial Attacks via Diffusion Models","created":"2023-09-14","cited_by_count":12,"area":"diffusion"},{"id":"2106.00576","title":"Exposing Previously Undetectable Faults in Deep Neural Networks","created":"2021-06-01","cited_by_count":11,"area":null},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2112.13534","title":"Adversarial Attack for Asynchronous Event-based Data","created":"2021-12-27","cited_by_count":9,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2107.08581","title":"A Systematical Solution for Face De-identification","created":"2021-07-19","cited_by_count":8,"area":null},{"id":"2110.11950","title":"Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff","created":"2021-10-22","cited_by_count":8,"area":null},{"id":"2211.15897","title":"Learning Antidote Data to Individual Unfairness","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2512.08176","title":"Worst-case generation via minimax optimization in Wasserstein space","created":"2025-12-09","cited_by_count":7,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2108.12492","title":"Disrupting Adversarial Transferability in Deep Neural Networks","created":"2021-08-27","cited_by_count":6,"area":null},{"id":"2211.10024","title":"Diagnostics for Deep Neural Networks with Automated Copy/Paste Attacks","created":"2022-11-18","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2103.07640","title":"Generating Unrestricted Adversarial Examples via Three Parameters","created":"2021-03-13","cited_by_count":5,"area":null},{"id":"2205.00210","title":"Software Testing for Machine Learning","created":"2022-04-30","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2311.12981","title":"SD-NAE: Generating Natural Adversarial Examples with Stable Diffusion","created":"2023-11-21","cited_by_count":5,"area":"diffusion"},{"id":"2401.07181","title":"Reinforcement Learning from LLM Feedback to Counteract Goal Misgeneralization","created":"2024-01-14","cited_by_count":5,"area":"alignment"},{"id":"2403.04701","title":"ObjectCompose: Evaluating Resilience of Vision-Based Models on Object-to-Background Compositional Changes","created":"2024-03-07","cited_by_count":5,"area":null},{"id":"2504.21646","title":"Diffusion-based Adversarial Identity Manipulation for Facial Privacy Protection","created":"2025-04-30","cited_by_count":5,"area":null},{"id":"2209.04920","title":"Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognition","created":"2022-09-11","cited_by_count":4,"area":null},{"id":"2306.00353","title":"Constructing Semantics-Aware Adversarial Examples with a Probabilistic Perspective","created":"2023-06-01","cited_by_count":4,"area":null},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2108.11032","title":"Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2312.13628","title":"Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples","created":"2023-12-21","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2410.02240","title":"SCA: Improve Semantic Consistent in Unrestricted Adversarial Attacks via DDPM Inversion","created":"2024-10-03","cited_by_count":3,"area":"diffusion"},{"id":"2504.11923","title":"SemDiff: Generating Natural Unrestricted Adversarial Examples via Semantic Attributes Optimization in Diffusion Models","created":"2025-04-16","cited_by_count":3,"area":"diffusion"},{"id":"2506.10685","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","created":"2025-06-12","cited_by_count":3,"area":null},{"id":"2506.21046","title":"Boosting Generative Adversarial Transferability with Self-supervised Vision Transformer Features","created":"2025-06-26","cited_by_count":3,"area":null},{"id":"2507.06078","title":"ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models","created":"2025-07-08","cited_by_count":3,"area":"diffusion"},{"id":"2510.03262","title":"Rethinking Inter-LoRA Orthogonality in Adapter Merging: Insights from Orthogonal Monte Carlo Dropout","created":"2025-09-26","cited_by_count":3,"area":null},{"id":"2104.08231","title":"An Adversarially-Learned Turing Test for Dialog Generation Models","created":"2021-04-16","cited_by_count":2,"area":null},{"id":"2105.04070","title":"Robust Training Using Natural Transformation","created":"2021-05-10","cited_by_count":2,"area":null},{"id":"2111.08973","title":"Generating Unrestricted 3D Adversarial Point Clouds","created":"2021-11-17","cited_by_count":2,"area":null},{"id":"2206.03717","title":"LADDER: Latent Boundary-guided Adversarial Training","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2208.14863","title":"Style-Agnostic Reinforcement Learning","created":"2022-08-31","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2309.11667","title":"Understanding Pose and Appearance Disentanglement in 3D Human Pose Estimation","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2507.02965","title":"Concept-based Adversarial Attack: a Probabilistic Perspective","created":"2025-06-30","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2508.15020","title":"TAIGen: Training-Free Adversarial Image Generation via Diffusion Models","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2601.18678","title":"Counterfactual Explanations on Robust Perceptual Geodesics","created":"2026-01-26","cited_by_count":2,"area":null},{"id":"2102.06162","title":"Defuse: Harnessing Unrestricted Adversarial Examples for Debugging Models Beyond Test Accuracy","created":"2021-02-11","cited_by_count":1,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2203.05408","title":"Attacks as Defenses: Designing Robust Audio CAPTCHAs Using Attacks on Automatic Speech Recognition Systems","created":"2022-03-10","cited_by_count":1,"area":null},{"id":"2208.10940","title":"Evaluating Out-of-Distribution Detectors Through Adversarial Generation of Outliers","created":"2022-08-20","cited_by_count":1,"area":null},{"id":"2301.12046","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","created":"2023-01-28","cited_by_count":1,"area":null}],"next_cursor":"100"}